Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly execute arbitrary code via (1) an FTP command with a long argument to FTPD (ftpdw.exe) or (2) a large amount of data to LPD (Lpdw.exe).
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Connectivity | Hummingbird | 7.1 (including) | 7.1 (including) |
| Connectivity | Hummingbird | 9.0 (including) | 9.0 (including) |
| Connectivity | Hummingbird | 10.0 (including) | 10.0 (including) |
References
- http://connectivity.hummingbird.com/support/nc/exceed/ftpd_advisory.html?cks=y
- http://connectivity.hummingbird.com/support/nc/exceed/lpdw_advisory.html
- http://secunia.com/advisories/15557
- http://www.securityfocus.com/bid/13788
- http://www.securityfocus.com/bid/13790
- http://connectivity.hummingbird.com/support/nc/exceed/ftpd_advisory.html?cks=y
- http://connectivity.hummingbird.com/support/nc/exceed/lpdw_advisory.html
- http://secunia.com/advisories/15557
- http://www.securityfocus.com/bid/13788
- http://www.securityfocus.com/bid/13790